CVEs published March 24, 2018
13 CVEs were published on March 24, 2018: 0 critical, 0 high.
- Published
- 13
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 13
- CVE-2018-8972Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows r
- CVE-2018-8973OTCMS 3.20 allows XSS by adding a keyword or link to an article, as demonstrated by an admin/keyWord_deal.php?mudi=add request.
- CVE-2018-8970The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2.7.1 does not support a certain special cas
- CVE-2018-8971The Auth0 integration in GitLab before 10.3.9, 10.4.x before 10.4.6, and 10.5.x before 10.5.6 has an incorrect omniauth-auth0 configuration,
- CVE-2015-9257BMC Remedy Action Request (AR) System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS.
- CVE-2017-17749Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.
- CVE-2017-17750Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.
- CVE-2017-17751Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol.
- CVE-2018-8965An issue was discovered in zzcms 8.2.
- CVE-2018-8966An issue was discovered in zzcms 8.2.
- CVE-2018-8967An issue was discovered in zzcms 8.2.
- CVE-2018-8968An issue was discovered in zzcms 8.2.
- CVE-2018-8969An issue was discovered in zzcms 8.2.